Skip to contentFacebook vulnerabilities
Newest
- facebook hermesOut-of-bounds Read and Out-of-bounds Write in Facebook HermesCVE-2020-1912Fix available8.1 High
- facebook hermesAccess of Resource Using Incompatible Type in Facebook HermesCVE-2020-1911Fix available9.8 Critical
- facebook whatsapp business for android, whatsapp business for iphone, whatsapp +3 more +5 moreA stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android...CVE-2020-18948.8 High
- facebook whatsapp business for android, whatsapp business for iphone, whatsapp +3 more +5 moreA user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17,...CVE-2020-18919.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for...CVE-2020-18907.5 High
- facebook whatsapp desktop, whatsapp desktop +1 moreA security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have...CVE-2020-188910.0 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android...CVE-2020-18868.8 High
- facebook whatsapp desktop, whatsapp desktop +1 moreAn input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed...CVE-2019-119286.1 Medium
- facebook proxygenA use-after-free is possible due to an error in lifetime management in the request adaptor when a...CVE-2020-18979.8 Critical
- facebook instagram, instagram for android +1 moreA large heap overflow could occur in Instagram for Android when attempting to upload an image...CVE-2020-18957.8 High
- facebook oculus desktop, oculus desktop +1 moreWriting to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1...CVE-2020-18857.8 High
- facebook thriftGolang Facebook Thrift servers vulnerable to denial of serviceCVE-2019-11939Fix available7.5 High
- facebook osqueryIncorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.CVE-2020-18879.1 Critical
- facebook thriftC++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes...CVE-2019-35537.5 High
- facebook thriftJava Facebook Thrift servers would not error upon receiving messages declaring containers of...CVE-2019-119387.5 High
- facebook hhvmInsufficient boundary checks when decoding JSON in TryParse reads out of bounds memory,...CVE-2020-18937.5 High
- facebook hhvmInsufficient boundary checks when decoding JSON in JSON_parser allows read access to out of...CVE-2020-18928.1 High
- facebook hhvmInsufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory,...CVE-2020-18887.5 High
- facebook hhvmHHVM does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does...CVE-2016-10001095.3 Medium
- facebook hhvmmcrypt_get_block_size did not enforce that the provided "module" parameter was a string, leading...CVE-2016-10000059.8 Critical
- facebook hhvmInsufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode...CVE-2016-10000049.8 Critical
- facebook whatsapp desktop, meta platforms whatsapp +1 moreA vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for...CVE-2019-18426In KEVPublic exploitEPSS 68.1%8.2 High
- facebook proxygenIn the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header...CVE-2019-119409.8 Critical
- facebook hhvmVarious APC functions accept keys containing null bytes as input, leading to premature truncation...CVE-2019-119369.8 Critical
- facebook hhvmInsufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of...CVE-2019-119359.8 Critical
- facebook follyImproper handling of close_notify alerts can result in an out-of-bounds read in AsyncSSLSocket....CVE-2019-119349.8 Critical
- facebook hhvmAn invalid free in mb_detect_order can cause the application to crash or potentially result in...CVE-2019-119309.8 Critical
- facebook mcrouterIn Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could...CVE-2019-119377.5 High
- facebook mcrouterIn Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user...CVE-2019-119237.5 High
- facebook hhvmhhvm before 3.12.11 has a use-after-free in the serialize_memoize_param() and ResourceBundle:...CVE-2016-10000069.8 Critical
- whatsapp, whatsapp business, enterprise client +6 more +8 moreA stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4...CVE-2019-11931Public exploit7.8 High
- facebook whatsapp for android, whatsapp, libpl droidsonroids gif project droidsonroids gif +2 moreA heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for...CVE-2019-11933Public exploit9.8 Critical
- facebook hhvmInsufficient boundary checks when formatting numbers in number_format allows read/write access to...CVE-2019-119299.8 Critical
- facebook whatsapp for android, whatsapp for ios, whatsapp +2 moreAn integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an...CVE-2019-119277.8 High
- facebook hhvmInsufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension...CVE-2019-119269.8 Critical
- facebook hhvmInsufficient boundary checks when processing the JPEG APP12 block marker in the GD extension...CVE-2019-119259.8 Critical
- facebook for woocommerceThe facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via...CVE-2019-158418.8 High
- facebook for woocommerceThe facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF.CVE-2019-158408.8 High
- facebook fizzA peer could send empty handshake fragments containing only padding which would be kept in memory...CVE-2019-119247.5 High
- facebook proxygenAn out of bounds write is possible via a specially crafted packet in certain configurations of...CVE-2019-119219.8 Critical
- facebook zstandardA race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could...CVE-2019-11922Fix available8.1 High
- facebook hhvm, hiphop virtual machine +1 moreCall to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically...CVE-2019-35709.8 Critical
- facebook whatsapp desktop, whatsapp +1 moreAn input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows...CVE-2019-35715.3 Medium
- facebook hhvmHHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior...CVE-2019-35697.5 High
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +4 more +6 moreAn out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers....CVE-2018-63509.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreWhen receiving calls using WhatsApp for Android, a missing size check when parsing a sender...CVE-2018-63499.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreWhen receiving calls using WhatsApp on Android, a stack allocation failed to properly account for...CVE-2018-63399.8 Critical
- facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 moreWhen receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided...CVE-2018-206559.8 Critical
- facebook osqueryIn some configurations an attacker can inject a new executable path into the extensions.load file...CVE-2019-35678.1 High
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +5 more +7 moreA buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via...CVE-2019-3568In KEVEPSS 30.1%9.8 Critical
- Show moreLoading…